Old 4th March 2011, 12:43   #1
DaZilertaler
Junior Member
 
Join Date: Mar 2010
Posts: 23
Strange connections in my log.

Strange connections in my log.
None of them are mine

2011-03-03 14:55:47 I msg:[SRC 50.18.49.49:53517 sid=1] SHOUTcast source connection.
2011-03-03 14:55:47 E msg:[SRC 50.18.49.49:53517 sid=1] connection denied. Bad password.
2011-03-03 14:55:48 I msg:[SRC 50.18.49.49:53608 sid=1] SHOUTcast source connection.
2011-03-03 14:55:48 E msg:[SRC 50.18.49.49:53608 sid=1] connection denied. Bad password.
2011-03-03 14:55:48 I msg:[SRC 50.18.49.49:53679 sid=1] SHOUTcast source connection.
2011-03-03 14:55:48 E msg:[SRC 50.18.49.49:53679 sid=1] connection denied. Bad password.
2011-03-03 14:55:49 I msg:[SRC 50.18.49.49:53750 sid=1] SHOUTcast source connection.
2011-03-03 14:55:49 E msg:[SRC 50.18.49.49:53750 sid=1] connection denied. Bad password.
2011-03-03 14:55:50 I msg:[SRC 184.73.126.115:40583 sid=1] SHOUTcast source connection.
2011-03-03 14:55:50 E msg:[SRC 184.73.126.115:40583 sid=1] connection denied. Bad password.
2011-03-03 14:55:52 I msg:[SRC 50.18.58.153:57135 sid=1] SHOUTcast source connection.
2011-03-03 14:55:52 E msg:[SRC 50.18.58.153:57135 sid=1] connection denied. Bad password.
2011-03-03 14:55:53 I msg:[SRC 50.18.58.153:57237 sid=1] SHOUTcast source connection.
2011-03-03 14:55:53 E msg:[SRC 50.18.58.153:57237 sid=1] connection denied. Bad password.
2011-03-03 14:55:53 I msg:[SRC 50.18.58.153:57361 sid=1] SHOUTcast source connection.
2011-03-03 14:55:53 E msg:[SRC 50.18.58.153:57361 sid=1] connection denied. Bad password.
2011-03-03 14:55:54 I msg:[SRC 50.18.58.153:57473 sid=1] SHOUTcast source connection.
2011-03-03 14:55:54 E msg:[SRC 50.18.58.153:57473 sid=1] connection denied. Bad password.
2011-03-03 14:56:00 I msg:[SRC 184.73.126.115:43256 sid=1] SHOUTcast source connection.
2011-03-03 14:56:00 E msg:[SRC 184.73.126.115:43256 sid=1] connection denied. Bad password.
2011-03-03 14:56:03 I msg:[SRC 204.236.254.109:39831 sid=1] SHOUTcast source connection.
2011-03-03 14:56:03 E msg:[SRC 204.236.254.109:39831 sid=1] connection denied. Bad password.
2011-03-03 14:56:07 I msg:[SRC 204.236.254.109:40205 sid=1] SHOUTcast source connection.
2011-03-03 14:56:07 E msg:[SRC 204.236.254.109:40205 sid=1] connection denied. Bad password.
2011-03-03 14:56:25 I msg:[ADMINCGI] Title update [Tears For Fears - Sowing The Seeds Of Love]
2011-03-03 14:58:35 I msg:[DST 50.16.239.114:55432 sid=1] SHOUTcast 1 client connection accepted. Mozilla/5.0 (compatible; Birubot/1.0) Gecko/2009032608 Firefox/3.0.8
2011-03-03 15:00:10 I msg:[SRC 174.129.138.219:49059 sid=1] SHOUTcast source connection.
2011-03-03 15:00:10 E msg:[SRC 174.129.138.219:49059 sid=1] connection denied. Bad password.
DaZilertaler is offline   Reply With Quote
Old 4th March 2011, 19:58   #2
MADxHAWK
Senior Member
 
Join Date: Jan 2010
Posts: 181
maybe a script kiddy or a bot checking your port

if it doesnt stop, block the ip via iptables than it should stop
MADxHAWK is offline   Reply With Quote
Old 4th March 2011, 23:36   #3
DrO
 
Join Date: Sep 2003
Posts: 27,873
all of the IP's appear to be Amazon EC2 related (going on the details from a quick check). so either someone is purposefully scanning and trying to screw around with things or it's accidentally using your IP as the destination (unlikely i know). if it keeps up then you should be able to track things back a bit more or attempt to get the IPs reported somehow. otherwise just block the IPs like MADxHAWK suggests and ensure you've got strong passwords.

-daz
DrO is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Shoutcast > Shoutcast Discussions

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump